Online retail and ecommerce are very lucrative target for hackers, and it's not just the big players. Though we always hear in the news about security breach in major companies like Sony or Target, according to research 71% of security breaches target small businesses that don’t have a security plan.
So I would like to ask online retailers few questions:
Which ecommerce platform do you use?
Do you have a security strategy for your business?
What do you do regarding security of you website (implement some security measures, have some software solution installed, rely on your hosting provider...)?
Are there any security measures you have taken yourselves and what are they?

Please do not respond with spammy one-liners like "cyber security is very important and we should do important things about it...", because I'm interested in hearing real answers. Thanks!